Overview

overview

10

Static

static

10

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_8d998af340dfa56aeb428f9924729a46_cryptolocker

  • Size

    44KB

  • Sample

    240522-2falsabe23

  • MD5

    8d998af340dfa56aeb428f9924729a46

  • SHA1

    4e0645f2c380dd14b9aad804436e5f504f2fc74e

  • SHA256

    c8263671117011d833a39a90a63cd5ef509e877478008e69da865d0b58ff21be

  • SHA512

    14d1e0c7c3d5f615c71ed3f3e1b45dcde725cf33edefaae88e5056cacf0411eb8b87de32dacc2f4a225b9e4e536f92b021175981cfdce51a7b0926e17d4037a1

  • SSDEEP

    768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAu:b/pYayGig5HjS3NPAu

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-05-22_8d998af340dfa56aeb428f9924729a46_cryptolocker

    • Size

      44KB

    • MD5

      8d998af340dfa56aeb428f9924729a46

    • SHA1

      4e0645f2c380dd14b9aad804436e5f504f2fc74e

    • SHA256

      c8263671117011d833a39a90a63cd5ef509e877478008e69da865d0b58ff21be

    • SHA512

      14d1e0c7c3d5f615c71ed3f3e1b45dcde725cf33edefaae88e5056cacf0411eb8b87de32dacc2f4a225b9e4e536f92b021175981cfdce51a7b0926e17d4037a1

    • SSDEEP

      768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAu:b/pYayGig5HjS3NPAu

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks